Ratels

What Ratels does

Ratels (RATELS Sp. z o.o.) is a Poland-based IT security services firm founded in 2009 and headquartered in Warsaw, with approximately 10 employees. The company delivers cybersecurity consulting, managed services, and third-party security platform integration, serving medium-to-large enterprise clients and regulated-sector organizations (finance, energy, public administration) facing GDPR, NIS2, and DORA compliance obligations.

The firm's core offering is a broad cybersecurity service catalog covering DLP (via Forcepoint), EDR/XDR (via SentinelOne), SIEM/SOAR (via Energy Logserver and Splunk), privileged access management, SSE/CASB/ZTNA cloud security, email encryption (CipherMail), deception technology (Labyrinth), and a full suite of penetration testing and security audit services for networks, applications, and IT systems. Ratels also applies a proprietary DPIA methodology aligned with Art. 35 GDPR. The technology stack is entirely multi-vendor — the company does not develop proprietary security software, with Labyrinth and the DPIA framework being its closest claims to differentiated intellectual property.

Commercially, Ratels operates a B2B direct enterprise field sales model with inquiry-driven demand generation via its website and LinkedIn. Pricing is custom-scoped per engagement under multi-year contracts; no public pricing tiers exist. Revenue is generated through professional services engagements, managed security services contracts, and software licensing/resale of its partner platforms. Geographic scope is limited to Poland and Central Europe, with no observed expansion signals, funding rounds, M&A activity, or leadership changes in the input data.

Name

Ratels

Legal name

RATELS Sp. z o.o.

Website

https://ratels.pl

Company type

Private

Operating status

Operating

Headcount range

1–10 employees

Short description

Ratels is a Warsaw-based IT security services firm that deploys and manages multi-vendor cybersecurity platforms (DLP, EDR/XDR, SIEM, PAM, deception) and delivers penetration testing and security audits for medium-to-large enterprises and regulated-sector clients in Poland.

Ownership category

akta.pro rank

Headquarters

HQ city

Warsaw

HQ country

Poland

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. Cybersecurity Consulting and Professional Services: Ratels provides expert cybersecurity services including security audits, penetration testing, security architecture consulting, and incident response. Services are scoped and priced individually via inquiry-driven engagement, with custom project-based pricing tailored to client infrastructure and requirements.
2. Managed Security Services: The company deploys and maintains third-party security platforms (DLP, EDR/XDR, SIEM, PAM) on behalf of clients, likely including ongoing support, monitoring, and management fees alongside project-based implementation.
3. Security Software Resale and Licensing: Ratels resells and implements licensed security software platforms including Forcepoint, SentinelOne, Energy Logserver, Splunk, WebSpy, and Labyrinth. Revenue is generated through software licensing (perpetual or subscription) and associated implementation services.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels3 records

Core offering

Ratels is a Polish IT security services company that delivers integrated cybersecurity solutions and professional services to enterprise clients. The company implements and manages third-party security platforms spanning Data Loss Prevention (DLP), Endpoint/Extended Detection and Response (EDR/XDR), Security Information and Event Management (SIEM/SOAR), Cloud Security (SSE/CASB/ZTNA), Privileged Access Management (PAM), email encryption, and deception technology. Complementing technology deployment, Ratels provides security audits, penetration testing of networks, web and mobile applications, and ongoing managed security services tailored to client infrastructure and regulatory requirements such as GDPR, NIS2, and DORA.

Product overview

Ratels is an IT security services company offering a comprehensive portfolio of cybersecurity solutions and professional services. The portfolio consists of core security service categories including data leak prevention (DLP), cloud security (SSE/CASB/ZTNA), malware protection (EDR/XDR), privileged access management (PAM), email encryption (CipherMail), and deception technology (Labyrinth). These are complemented by professional security testing and auditing services covering network, application, and mobile security assessments as well as penetration testing. The company also provides event analysis and SIEM/SOAR solutions through partnerships with platforms like Energy Logserver, Splunk, and WebSpy. Ratels positions itself as a comprehensive IT security partner delivering expert solutions across the entire security spectrum, from preventive measures to incident response and security monitoring.

Differentiator

Problem solved

Functional benefit

Products and services

• Data Leak Prevention (DLP)
• Cloud Data Security (SSE/CASB/ZTNA/CDR) Cloud data protection through Security Service Edge solutions encompassing Cloud Access Security Broker (CASB), Zero Trust Network Access (ZTNA), and Content Disarm and Reconstruction (CDR) to secure data in cloud environments while preserving user experience. Targeted at organizations operating multi-cloud and hybrid infrastructures.
• Malware Protection (EDR/XDR) Deployment and management of Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR) platforms, primarily SentinelOne, for real-time threat detection, AI-powered behavioral analysis, endpoint isolation, and automated incident response. Includes threat hunting support and detailed telemetry for security operations.
• Privileged Access Management (PAM) Implementation of Privileged Access Management solutions to monitor administrative accounts and protect critical access credentials, preventing misuse of elevated privileges. Aimed at organizations needing to control and audit privileged access across their IT estate.
• Email Encryption Gateway (CipherMail) Centralized email gateway (CipherMail) that automatically encrypts and digitally signs outgoing messages within an organization, protecting confidential correspondence without requiring changes to user behavior. Targeted at organizations handling sensitive communications.
• Deception Technology (Labyrinth) Deployment and management of the Labyrinth deception platform, which creates distributed, realistic honeypots (servers, applications, databases, user accounts, files) across IT, OT, and IoT environments to detect intruders with near-zero false positives, capture attacker telemetry, and integrate with SIEM and XDR systems. Designed for advanced threat detection in enterprises with critical infrastructure.
• Security Event Analysis (SIEM/SOAR) Collection and analysis of security events, automated response, and incident management using SIEM and SOAR platforms. Includes deployment of Energy Logserver (log management with NetFlow-based network probe and compliance reporting for GDPR/NIST) and Splunk for machine data analysis. Supports centralized log aggregation, security rules, vulnerability scanning, and automated alerting.
• Security Audits and Penetration Testing Testing and advanced security analysis of web applications, mobile applications, IT infrastructure, and cloud-based solutions. Includes network penetration testing, web application penetration testing, mobile application security testing, network security audit, application security audit, and IT systems security audit — each concluding with prioritized remediation recommendations. Targeted at organizations seeking to identify vulnerabilities and validate security posture.
• Comprehensive Cybersecurity Programs Integrated cybersecurity program delivery combining technology deployment with expert consulting, security strategy, CISO advisory, NIS2/DORA compliance support, incident response planning, DPIA methodology, and security awareness training. Designed for organizations seeking a comprehensive, methodically delivered security program adapted to evolving threats.

Quantifiable outcome

• Labyrinth generates less than 1% false-positive alerts

Segments3 records

Ideal customer profiles2 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration8 records

Feature7 records

Partnerships

Four partnerships are on record, tiered core.

• ForcepointcoreTechnology or IntegrationRatels is an implementation and integration partner for Forcepoint's DLP (Data Loss Prevention) solutions. The company deploys and manages Forcepoint DLP for clients to monitor and block unauthorized data transfers, protect against accidental and intentional data exfiltration, and enforce security policies across email, web, and file sharing channels. Forcepoint DLP is referenced as a key component in Ratels' data protection and anti-exfiltration offerings.
• SentinelOnecoreTechnology or IntegrationRatels integrates SentinelOne's XDR/EDR (Extended Detection and Response / Endpoint Detection and Response) platforms for clients. SentinelOne is used for real-time threat detection, behavioral analysis powered by AI, endpoint isolation, and automated incident response. It is highlighted as supporting threat hunting activities and generating detailed telemetry for security operations.
• Energy Logserver / Energy SOARcoreTechnology or IntegrationEnergy Logserver is a SIEM and log management platform that Ratels implements and supports. It consists of three modules: Log Management Plan (centralized log aggregation), SIEM Plan (security rules, compliance reporting for GDPR/NIST, vulnerability scanning), and Network Probe (network traffic analysis). Ratels positions Energy Logserver as an alternative to Splunk with a favorable licensing model and offers its own implementation, configuration, and integration services.
• Labyrinth (Deception Technology)coreTechnology or IntegrationLabyrinth is a deception-based cybersecurity platform that Ratels offers as part of its advanced threat detection portfolio. The platform deploys distributed honeypots and deceptive assets (servers, applications, databases, user accounts, files) across IT, OT, and IoT environments to detect intruders who have bypassed perimeter defenses. Ratels implements, configures, and supports the Labyrinth platform for enterprise clients.

Scale indicators1 record

Recent moves6 records

Expansion highlights5 records

Broad incumbents

• Comarch: Polish-headquartered IT services and software provider with a cybersecurity division offering SIEM, IAM, and compliance services. Competes with Ratels in regulated industries in Poland and across Europe.
• NCC Group: UK-based global cybersecurity consulting firm specializing in penetration testing, security audits, and managed services. Highly comparable to Ratels' security testing and consulting offerings at significantly larger scale.
• Orange Cyberdefense: European MSSP offering managed security services, penetration testing, and threat intelligence across multiple geographies. Comparable to Ratels' MSSP-style services but at much larger scale.
• WithSecure: Nordic-headquartered cybersecurity vendor offering managed detection and response, EDR/XDR, and consulting services. Comparable to Ratels' managed security services and European regional focus.
• Asseco Poland: Largest Polish IT/cybersecurity conglomerate with a broad security services portfolio. Competes with Ratels in Polish enterprise cybersecurity but operates at vastly larger scale with broader service offerings.

Direct peers

• Fudo Security: Polish-headquartered cybersecurity vendor specializing in privileged access management (PAM). Overlaps directly with Ratels' PAM and broader IT security services portfolio serving Polish and European enterprises.
• Securitum: Polish cybersecurity consulting firm offering penetration testing, security audits, and managed security services to enterprise clients. Highly comparable to Ratels in service portfolio, target market, and Polish regional focus.
• Clico: Polish value-added distributor and cybersecurity services provider offering integration and managed services across multiple security vendors. Comparable business model to Ratels as a multi-vendor cybersecurity integrator in Poland and CEE.
• Sequri: Polish cybersecurity services company offering penetration testing, security audits, and managed security services. Direct competitor to Ratels in the Polish enterprise cybersecurity market.

Regional players

• Inrego: Polish IT services and security provider with adjacent cybersecurity offerings. Less direct overlap than Securitum or Sequri but comparable in regional positioning and target market.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat3 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/ratels

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Ratels